HackTheBox - AirTouch
Source: YouTube · IppSec · published Apr 18, 2026 · 52:19
The Air Touch Hack The Box machine challenges users to exploit a Docker environment containing wireless tools, requiring a pivot from initial wireless reconnaissance to SSL certificate compromise before executing an Evil Twin attack.
Key Takeaways:
• The machine starts with the user in a Docker container as root, equipped with wireless cards and the aircrack-ng suite, creating a unique virtual Wi-Fi exploitation scenario 0:12.
• While an Evil Twin attack is the endgame, the initial phase requires wireless reconnaissance to identify and crack WPA network pre-shared keys to pivot and access further data 0:26.
• The path to root involves compromising SSL certificates, which unlocks the ability to perform the final exploitation step using airbase-ng and aircrack-ng 0:22.
• The setup and initial wireless recon are cited as the most difficult parts of the box, demanding careful handling of virtual wireless interfaces 0:09.
This box offers a distinct approach to penetration testing by focusing heavily on Wi-Fi protocols within a containerized environment. It emphasizes the importance of early-stage reconnaissance over immediate exploitation.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Penetration Testing. Commonly maps to: Security Assessment and Testing, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
What's going on, YouTube? This is Ipsac and today be doing Air Touch from Hack the Box, which is a really unique box that involves a lot of Wi-Fi exploitation, which is really cool to see done in a virtual environment. I think the hardest part of this box is the beginning because you land in a Docker container as root that has both wireless cards and the EP hammer tool set pre-installed. So, the natural thought is to use eammer to perform the evil twin attack. But that isn't until much later in this box until after we've compromised some SSL certificates. If we take a step back and do wireless recon, we'll see some WPA networks that we can crack the pre-shared key to and pivot around that lets us um access more data. Another difficulty I had was just using the error dump tool set because I…